JVNDB-2009-000070

SEIL/X Series and SEIL/B1 denial of service vulnerability

SEIL/X Series and SEIL/B1 contain a denial of service (DoS) vulnerability.

SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the NAT function, which may lead to a denial of service (DoS) vulnerability.

Base Metrics: 7.8 (High) [IPA Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: None
• Availability Impact: Complete

Internet Initiative Japan Inc.

• SEIL/B1 firmware 2.30 to 2.51
• SEIL/X1 firmware 2.30 to 2.51
• SEIL/X2 firmware 2.30 to 2.51

When processing a specially crafted packet, a remote attacker may cause a denial of service.

[Update the Software]
Update to the latest version according to the information provided by the developer.

Internet Initiative Japan Inc.

• IIJ : a00674.php (Japanese)

1. Improper Input Validation(CWE-20) [IPA Evaluation]

1. CVE-2009-4293

1. JVN : JVN#13011682
2. National Vulnerability Database (NVD) : CVE-2009-4293
3. Secunia Advisory : SA37154
4. ISS X-Force Database : 54050
5. VUPEN Security : VUPEN/ADV-2009-3111
6. OPEN SOURCE VULNERABILITY DATABASE (OSVDB) : 59361

[2009/11/02]
  Web page published